Common use of University Data Clause in Contracts

University Data. “University Data”, which shall also be known and treated by Contractor as Confidential Information, shall include: (a) data collected, used, processed, stored, or generated as the result of the use of the services; (b) regulated sensitive data e.g., data governed by state, federal and, if applicable, international laws, agreements, or treaties, such as the Family Educational Rights and Privacy Act, Health Insurance Portability and Accountability Act, Gramm–▇▇▇▇▇–▇▇▇▇▇▇ Act, and the Oregon Consumer Identity Theft Protection Act, EU General Data Protection Regulation, and other federal, state, or local laws, or contractual obligations; (c) unregulated sensitive data e.g., data that is not regulated by statute, but still considered sensitive due to proprietary, ethical, or privacy considerations, including all forms of research, and any information that can be used to assist an attacker in compromising the confidentiality, integrity or availability of University information systems and data; and (d) PII collected, used, processed, stored, or generated as the result of the use of the services, including, without limitation, information that: (i) identifies or can be used to identify an individual (including, without limitation, names, signatures, addresses, telephone numbers, email addresses, government issued IDs, IP address or web cookies, and other unique identifiers); or (ii) can be used to authenticate an individual including, without limitation, employee identification numbers, government-issued identification numbers, social security number, passwords or PINs, financial account numbers, credit and debit card numbers, credit report information (with or without any required security code, access code, personal identification number or password, that would permit access to an individual’s financial account), biometric or health data, genetics, race or ethnic origin, sex life or sexual orientation, political opinions, religious or philosophical belief, criminal convictions, answers to security questions and other personal identifiers. University Data is and shall remain the sole and exclusive property of University and all right, title, and interest in the same is reserved by University. Contractor shall implement safeguards consistent with accepted industry practices to protect University Data. This section shall survive the termination of this Contract.